Deprecated API

Contents

• Interfaces
• Classes
• Fields
• Methods

Deprecated Interfaces

Interface	Description
org.apache.shiro.web.servlet.HttpSessionContext

Deprecated Classes

Class	Description
org.apache.shiro.web.config.WebIniSecurityManagerFactory	use Shiro's Environment mechanisms instead.
org.apache.shiro.web.servlet.IniShiroFilter	in 1.2 in favor of using the ShiroFilter

Deprecated Fields

Field	Description
org.apache.shiro.web.mgt.DefaultWebSecurityManager.HTTP_SESSION_MODE
org.apache.shiro.web.mgt.DefaultWebSecurityManager.NATIVE_SESSION_MODE

Deprecated Methods

Method	Description
org.apache.shiro.web.env.EnvironmentLoader.determineWebEnvironmentClass(ServletContext)	This method is not longer used by Shiro, and will be removed in future versions, use EnvironmentLoader.determineWebEnvironment(ServletContext) or EnvironmentLoader.determineWebEnvironment(ServletContext)
org.apache.shiro.web.mgt.DefaultWebSecurityManager.getSessionMode()
org.apache.shiro.web.mgt.DefaultWebSecurityManager.setSessionMode(String)	since 1.2
org.apache.shiro.web.mgt.DefaultWebSubjectFactory.newSubjectInstance(PrincipalCollection, boolean, String, Session, ServletRequest, ServletResponse, SecurityManager)	since 1.2 - override DefaultWebSubjectFactory.createSubject(org.apache.shiro.subject.SubjectContext) directly if you need to instantiate a custom Subject class.
org.apache.shiro.web.servlet.OncePerRequestFilter.shouldNotFilter(ServletRequest)	in favor of overriding OncePerRequestFilter.isEnabled(javax.servlet.ServletRequest, javax.servlet.ServletResponse) for custom behavior. This method will be removed in Shiro 2.0.
org.apache.shiro.web.servlet.ShiroHttpServletRequest.isRequestedSessionIdFromUrl()
org.apache.shiro.web.servlet.ShiroHttpServletResponse.encodeRedirectUrl(String)
org.apache.shiro.web.servlet.ShiroHttpServletResponse.encodeUrl(String)
org.apache.shiro.web.servlet.ShiroHttpSession.getValue(String)
org.apache.shiro.web.servlet.ShiroHttpSession.getValueNames()
org.apache.shiro.web.servlet.ShiroHttpSession.putValue(String, Object)
org.apache.shiro.web.servlet.ShiroHttpSession.removeValue(String)
org.apache.shiro.web.util.WebUtils.getRequestUri(HttpServletRequest)	use getPathWithinApplication() to get the path minus the context path, or call HttpServletRequest.getRequestURI() directly from your code.